CVE-2007-2741
Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.
Date published : 2007-05-17
http://www.securityfocus.com/bid/24001
http://www.mandriva.com/security/advisories?name=MDKSA-2007:238